Vulnerabilities > CVE-2019-13614 - Out-of-bounds Write vulnerability in Tp-Link Archer C1200 Firmware 1.0.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
tp-link
CWE-787

Summary

CMD_SET_CONFIG_COUNTRY in the TP-Link Device Debug protocol in TP-Link Archer C1200 1.0.0 Build 20180502 rel.45702 and earlier is prone to a stack-based buffer overflow, which allows a remote attacker to achieve code execution or denial of service by sending a crafted payload to the listening server.

Vulnerable Configurations

Part Description Count
OS
Tp-Link
4
Hardware
Tp-Link
1

Common Weakness Enumeration (CWE)